Describe the bug
When using Find-FalconDuplicate and a host record does not have a first_seen value, the command generates an error.
To Reproduce
Either provide a list with a host that does not have a first_seen value, or have a host with a missing first_seen value in your CID and allow Find-FalconDuplicate to retrieve it
Expected behavior
Although this error message is expected behavior for how Find-FalconDuplicate works, first_seen is not required for how the command determines if something is a duplicate. Only the cid, hostname and last_seen fields are required.
To change this, I'm going to remove first_seen as a required property. It will still be shown in the final "duplicate list" output when provided to Find-FalconDuplicate.
Environment (please complete the following information):
Describe the bug
When using
Find-FalconDuplicateand a host record does not have afirst_seenvalue, the command generates an error.To Reproduce
Either provide a list with a host that does not have a
first_seenvalue, or have a host with a missingfirst_seenvalue in your CID and allowFind-FalconDuplicateto retrieve itExpected behavior
Although this error message is expected behavior for how
Find-FalconDuplicateworks,first_seenis not required for how the command determines if something is a duplicate. Only thecid,hostnameandlast_seenfields are required.To change this, I'm going to remove
first_seenas a required property. It will still be shown in the final "duplicate list" output when provided toFind-FalconDuplicate.Environment (please complete the following information):